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(54) Title: PROOF OF POSTAGE DIGITAL FRANKING 

(57) Abstract 

A proof-K)f-postage generating system (22, 24. 25, 26, 
27) wherein funds, application of those funds, the replenish- 
ment of those funds said tfie auditing of those funds are secure 
against attempts at fiiaud. The system (22, 24, 25, 26, 27) may 
either be a Closed System (CS) wherein the proof-of-postage 
printing means (22) are housed within the system computa- 
tional means (24, 26) or within a cryptographically secure 
boundary. Further, the system (22, 24, 25, 26, 27) may be 
an Open System (OS) wherein the proof-of-postage printing 
means are external to the system ccmiputational means (24, 
26). 



1 



FRANKING DEVICE 




*» POSTAL 






SECURITY 






DEVK:E (PSD) 






PRINTING 






MECHANISM 



33 




-22 



-25 



26 



32 



PERSONAL 
COMPUTER 



23 



PRINTER 



ALTERNATELY. THE 
PSD CAN BE 
EXTERNAL TO 
THE FRANKING 
DEVICE 
(SEE FIG. 1) 



32 



PRfNTER 



23 



PERSONAL 
COMPUTER 



PRINTER 

~7 
23 



32 



PERSONAL 
COMPUTER 



26 



23 



32 



PRINTER 



\ 


PERSONAL 




COMPUTER 





FOR THE PURPOSES OF INFORMATION ONLY 
Codes used to identify States party to the PCT on the front pages of pamphlets publishing international applications under the PCT, 





Attttnia 


ES 


Span 


LS 


LesoUn 


St 


Slovenia 


AM 


Annaua 


n 


FtnlaDd 


LT 


Lithuania 


SK 


SlovakU 


AT 


Anstra 


FR 


Prance 


LU 


Loacmboarg 


SN 


Senegal 


AU 


Aostnlia 


OA 


GaboD 


LV 


Uitvia 


sz 


Swazitattd 


AZ 


Azcitaujni 


OB 


United Kntgdoni 


MC 


Monaco 


TD 


Chad 


BA 


BosittS tnd Herccgovnw 


GE 


Geocgta 


MD 


Republic of Mokknra 


TC 


Togo 


BB 


Btfbados 


GH 


Gttana 


MG 


Madagatcar 


TJ 


Ta^itfxn 


BE 


Bclgnsn 


ON 


Gtmiea 


MK 


The ftjrrocr Yugoslav 


TM 


l^nfcmenutan 


BF 


Buritina Faso 


GR 


Greece 




Republic of Macedonia 


TR 


Tttftcy 


EC 


Botgiria 


HU 


Hnngaiy 


ML 


Mali 


TT 


TYinidad and Toba^ 


BJ 


Benin 


IE 


Ireland 


MS 


Mongolia 


UA 


Ukraine 


BR 


BfBzil 


IL 


Israel 


MB 


Mauritania 


UG 


Uganda 


BY 


Belarus 


IS 




MW 


Malawi 


US 


United Slates of America 


CA 


Caxtida 


IT 


Italy 


MX 


Mexico 


uz 


UzbekistaD 


CF 


Central African Republic 


JP 


Japan 


NE 


Niger 


VN 


Via Nam 


OG 


Congo 


KE 


Kenya 


NL 


1st .ill . it - ■ ' 

netneruQas 


YU 


Yvgo&lavia 


CH 


Switzcrtand 


KG 


Kyigyziian 


NO 


Norway 


ZW 


Zimbabwe 


a 


Ctu dfvoire 


KP 


Democratic People's 


NZ 


New Zcafcmd 






CM 


CanicniOQ 




RepiAlic of Korea 


PL 


Polxad 






CN 


Quaa 


KR 


Rcptdibc of Koee3 


PT 


Pbftngal 






CU 


Coha 


KZ 


Kazalcxias 


RO 


Rotnania 






CZ 


Cztch Rcpoblic 


LC 


Saim Ijsb 


RU 


Roxsian Fedcrslion 






DE 


Germany 


U 




SD 


Sudan 






OK 


Demtazlt 


LK 


Sri Lanka 


SE 


Sweden 






EE 


Estonia 


LR 


Liberia 


SG 









WOW13790 



PCTAJS97/17065 



Proof of postage digital franking 
Technical field 

The invoition relates generally to postage meters, also called franking machines, and rdates 
more particularly to dectronic postage meters printing digital postal indicia. 

Background art 

5 Postage meters are well known. The presmt assignee has been designing and manufacturing 
postage meters for many, many decades. After these decades of exp^ence, postage meters 
are CTCtremdy reliable and cost has been reduced to a minimum. A typical postage meter prints 
its postage by means of an intaglio-type metal or strong plastic printing plate or die plate, 
using specified fluorescent ink^ . 

10 Most postage meter customers never have reason to call for repair of their postage meters. 

Postage meters are simple to operate and there is little to go wrong. They have been accepted 
by nearly all the post offices of the worid. Postage meters benefit post offices by reducing the 
need for retail sales of postage stamps, and by making it easy for postal patrons to adjust to 
changes in postage rates. Present-day postage meters are able to accommodate mail pieces of 

1 5 varying thickness, and are able to print their indicia even if the surface of the mail piece is 
uneven. 

Nothwithstanding the reliability, low cost, and ease of use of present-day postage meter 
designs, it has been suggested by some postal authorities that ail postage meters presently in 
use be removed from service and that postage be printed instead by common computer 

20 printers using ordinary ink. This means that anyone with an ordinary computer printer can 
readily generate a plausible-lootdng postal indicium at any time and in any desired quantity. 
The only possible approach for reducing fraud, when ordinary computer printers are used, is 
to incorporate cryptographically secure information into the postal indicium, and to read and 
verify that information on each and every mail piece. The present invention is directed to 

25 system configurations in which such cryptographically secure information is generated for use 

1 
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in printing such indicia. To be conunmnaDy viable, such system configurations must not only 
satisfy the requironents of the postal authorities, but must also pro\ide user function more or 
less approximating that of present-day postage meters. 

Disclo^re of mvention 

5 A proof-of*postage generating syston who^ funds, plication of those funds, the 

rq)lenishment of those fimds and the auditing of those funds are secure against attempts at 
fraud. The system may dther be a Closed System (CS) wherein the proof-of postage printing 
means are housed within the system computational means or within a cryptographically secure 
boundary. Furthw, the system my be an Open System (OS) wherdn the proof-of postage 
1 0 printing means are external to the system computational means. 

Brief description of the drawing 

The invention will be described with respect to a drawing in several figures, of which: 

Fig. 1 is a fimctional block diagram of a first embodiment of a closed-system type of postage 
meta; 

1 5 Fig. 2 is a functional block diagram of a second embodimmt of a closed-system type of 
postage meter. 

Fig. 3 is a fimctional block diagram of a third raibodiment of a closed-system type of postage 
meter; 

Fig. 4 is a fimctiona] block diagram of a first embodiment of an open-system type of postage 
20 meter; 

Fig. S is a fimctional block diagram of a second onbodiment of an open-system type of 
postage met^. 
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Fig. 6A is a functional block diagram of a third mbodim^ of an open-system type of postage 
meter, with an internally moimted postal security device (PSD); 

Fig. 6B is a functional block diagram of a third embodiment of an open-system type of postage 
meter, with an e?ctemally mounted PSD; 

5 Fig. 7A is a fimctional blodc diagram of a fourth embodiment of an op^system type of 
postage meter, with an internally mounted postal security device (PSD); 

Fig. 7B is a fimctional block diagram of a fourth onbodiment of an open-systan type of 
postage meteTy with an externally mounted PSD; 

Fig. 8 is a functional block diagram of a fifth embodiment of an open-system type of postage 
10 meter; 

Fig. 9A is a fimctional block diagram of a first embodiment of a hybrid of a closed-syst^ and 
open-system type of postage meter; and 

Fig. 9B is a functional block diagram of a second embodiment of a hybrid of a closed-system 
and open-system type of postage meter. 

1 5 Modes for carrying out the invention 

A proofof-postage generating system is described herein fimds, application of those funds, 
the rq)lenidmimt of those fimds and the auditing of those funds are secure against attempts at 
fraud. The syst^ may either be a Closed System (CS) wherdn the proof-of postage printing 
means are housed within the system computational means or within a cryptographically secure 
20 boundary. Akemativdy, the system may be an Open System (OS) wherein the proof-of 
postage printing means are external to the system computational means. 

As will be described in more detail below, what is provided is a Postal Setnirity Device (PSD) 
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within which is hous^ physically secure, as well cryptographically secure fiinds and assodated 
accounting registers, said PSD itself being utilized within a dynamic system which provides for 
the interchange of data b^ween a fimds provider source, a computational funds tracking and 
maintenance source and a printing source. Each embodimott described bdow, whether an 
S Open System (OS) or Closed System (CS), provides aU necessary security against fraudulent 
attacks against the system. This mvration is intended to provide a customers with a number of 
alternative approaches to optimize the customer's use, tracking, and replCTshmg of the 
customer's franking funds within the envircHonfflt surrounding the disposing of postal fimds 
for proof*of-paymCTt for the services required. In all cases, the proof-of-postage (postal 
10 indiciimi) is digitally generated data. Said digital data is represented as an image (genially, a 
printed image) on the mailpiece requiring said proof-of-postage. Said proof-of postage may be 
represented as a graphical image, human readable information, various bar codes (both 1- 
dimensional or 2-dimensional codes), OCR characters, etc., or any combination thereof 

The Postal Security Device (PSD) will support methods of applying postage in Heu of the 
1 S present-day approach, which is typically a self-contained electromechanical or mechanical 

postage meter ^ch imprints indida on mailpieces. Described below are a number of system 
integration deigns wh«^ said PSD is a small dement of both large and small systems 
cq)able of supporting the needs of both large and small businesses, as well as the private 
dtizen. 

20 The first embodiments set forth h^ein relate to Closed Systems (CS) which may take the form 
of three differmt embodiments, depmient upon the needs of the customer. This CS approach 
provides a printing means within the franking device or within a cryptographically secure 
boundary as executed by a vendor. Said flunking device is dedicated to the imprinting of 
proof-of-postage (said proof-of-postage will take the form and aesth^cs required by the 

25 regulating body) and other rdated information (at times ref^ed to as audit information and 
reports). In all cases and embodiments, the cryptographic content of the printed indida image 
contains information unique to that transaction and spedfic PSD. 

In the first embodiment of this dosed systmi arrangement, the Postal Security Device (PSD) 
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22 is attached as a "dongle'* (an adaptive inter&dng device which connects to and us^ a 
communications port while still allowing the port to be used by other devices) to the self 
contained franking device 24 (see Figure 1). The cryptographic data content b^een the PSD 
22 and franking device 24 is vmfied for authraitidty (e.g. ^gnature certificate) wfaer^pon the 
S printing mechanism 25 within the firanking device 24 delivers the q)piopiiate image to the 
maflpiece, letto" or mvoice. Crediting new fimds to the PSD is managed by an interfece 
(modem) 21 adapted to the franking device 24 which communicates cryptographically with a 
host Data Centa- 20 vAnch provide fimds fi>r the PSD throng the franking device 24. The 
communications b^een the franking device 24 and Data Crater 20 or betwera the Sinking 

10 device 24 and PSD 22 are oyptographicaOy encoded with all transactions being vaified by the 
crypto-code ^ructure and certificate authorization schana as required by the r^ulating body. 
Said PSD 22 may be moved firom one franking device 24 to another so long as each franking 
device 24 is authorized/keyed to fimction with said PSD 22. In all cases the PSD 22 has the 
ability to account for fimds and history as rdated to the franking device 24 to v/hich it has 

IS been attached. 

Those skilled in the art will appredate that the communications channel 3 1 between the 
franking device 24 and the data caiter 20 need not be secure. The channel 31 may be a dialed 
voice telephone call over the public switched telephone network, with modems at each end of 
the line. Alternatively, the channel 31 may be an ISDN telephone call, or may be a TCP/IP 
20 session placed over any suitable physical medium and underlying protocol, such as frame relay. 
The communications between the fianldng device 24 and data centa* 20 may desirably be 
carried out as set forth in U.S. Pat. No. 5,237,506, assigned to the same assignee as the 
as^gnee of the present invaition. 

Those skilled in the art will also appreciate that the postal security device 22 contains an 
25 accounting raster indicative of postage value, and contains cryptographic means, said 
cryptographic means disposed for secure communications with a remote host 20 for 
adjustment of the contmts of said accounting register, said cryptographic means finther 
disposed for generation of data to be mduded in said postal indicia, said postal security device 
22 disposed to account within ^d accounting register for postage value provided in said 



5 



wo 98/13790 



PCr/US97/17065 



, postal indida and to &H to generate such data when said accounting register satisfies a 
predetennined condition. In a typical anangraient, the accountmg regist^ of the PSD 22 is a 
descending roister, and postal indicia are printed only if the value stored in the descending 
register is greater than the amount of postage value desired to be printed. In this way the 
5 postage printing system CTiploying the PSD 22 mimics the well-known behavior of a presrat- 
day postage meter in which the met^ rdiises to print more postage if it is empty or almost 
^i^yty. 

In the second embodiment of this dosed system ^ploymmt, as shown in Fig. 2, the Postal 
Security Device (PSD) 22 is internal to the fianking device 24 and is di^sed to the same 

10 security requiron^its of the first raibodiment. Crediting new funds to the PSD is managed by 
an inter&ce (modem) 21 adapted to the franking device 24 which communicates 
cryptogr^hically with a host Data Crater 20 which provide fimds for the PSD 22 through the 
fianking device 24. The conmmnications between the franking device 24 and Data Center 20 
or between the franldng device 24 and PSD 22 are cryptographically encoded with all 

1 5 transactions bdng verified by the crypto-code structure and certificate authorization schema as 
required by the regulating body. The conmiunications between the franking device 24 and data 
center 20 may desirably be carried out as set forth in U.S. Pat. No. 5^37,506, assigned to the 
same assignee as the assignee of the present invention. Said PSD 22 is not accessible for 
removal from the fianking device 24. Attenq>ts to do so or to modify PSD contents will be 

20 met with its fail safe ability to secure itsdf and its internal registers as required by the 
regulatory authority. 

In the third embodiment of this closed system employment, the Postal Security Device (PSD) 
22 is interfaced to a pownal computer 26 as is shown in Figure 3. 

Tte PSD 22 is credited with fimds via communications (typically modrai) betwera the 
25 personal computo^ (PC) 26 and associated Data Center 20. The communications between the 
PC 26 and Data Center 20 follow the cryptographic security rules and signature verifications 
required by the regulatory body. The communications between the PC 26 and data crater 20 
may desirably be carried out as set forth in U.S. Pat. No. 5,237,506, assigned to the same 
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assignee as the assignee of the present invention. Further, the secure communications b^ween 
the PSD 22 and the rmote fiankii^ device 24 are likewise assured. 

The PC 26 is programmed so that it can recdve a request from a user for the printing of 
postage^ and forward information about the request to the PSD 22. The PSD 22 provides 
S cryptographically seoired data whidi will be contained in the po^ indicium, and this data is 
provided ev^ituaOy to a prints for printing. 

It ^ould be ^predated that the particular oyptc^raphic standards employed in geno^ating the 
data for the indicium are ^)edfied by the postal authorities, and thus that the particular 
oyptographic standard CTiployed is not aitical to the invention. Likewise, the form of 
10 indidum (e.g. 1-D or 2-D bar code and other aspects of layout) are also specified by the postal 
authorities and thus are not critical to the invration. 

The PSD device 22, evident in the first and third embodiments (Figs. 1 and 3), present the 
opportunity for physically relocating said PSD 22 from a system configuration evidmced in 
Figure 1 to a differmt system configuration evidenced in Figure 3, or vice versa. Said PSD 22 
1 S has the capability of optionally containing potinent information regarding the system 

adaptation to whidi it is incorporated, including such parametric data as host serial numbers, 
register readings, and the Uke. The PSD 22 nested in Figure 3 could be located in or on the 
Franking Device 24, to wit, the PC 26 would communicate to the Franking Machine's PSD 
via any PC compatible communications link (e.g. RS232, parallel, etc.). 

20 The Open System (OS) arrangem^it, which may take the form of five diff^^t embodiments, 
win now be described. The selection of the particular ^id>odim^ is determined by the needs 
of the customer. This employment provides a printing means 23 outside a franking device. 
Said printing means 23 is any commerdally available printing means capable of reproducing 
the fi'anked image contsit, mak^p and resolution in accordance with regulatory requirements 

25 addressing said fianked image cont»t, mak^p and resolution. In all cases and ^bodiments, 
the cryptographic content of the printed indicia image contains information imique to that 
transaction and spedfic PSD. In the first raibodim^t of this open system arrangement, as 
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shown in Fig, 4, the PSD 22 is interfaced to a Personal Computer (PC) 26 communicadon 
port. Also interfeced to the same PC 26 is a prints 23 capable of reproducing the fianked 
image content, makeup and resolution in accordance with regulatory requirements. 

Crediting new funds to the PSD 22 is managed by an intCTfece (mod«n) 2 1 adapted to the PC 
26 which communicates oyptographically with a host Data C«iter 20 vAnch provide funds 
for the PSD 22 through the PC 26. The communications between the Data Center 20 and PSD 
22 are cryptographically encoded with ail transactions bang verified by the crypto-code 
structure and certificate authorization sch&m as required by the regulating body. The 
communications between the PSD 22 and data center 20 may desirably be carried out as set 
forth in U.S. Pat. No. 5^37,506, assigned to the same assignee as the assignee of the presMt 
invOTtion. Said PSD may be moved from one PC 26 to another. Further, said PSD 22 may be 
relocated to a Closed System (CS) embodiment such as that set forth in Figs. 1 and 3. 

In the second embodiment of an Opm System arrangemCTt, the PSD 22 is internally interfaced 
to a Personal Con^ter (PC) 26 as is shown in Figure 5 . Also interfaced to the same PC 26 is 
a printer 23 capable of reproducing the firanked image content, makaip and resolution in 
accordance with regulatoiy requirements. 

This embodiment of the Postal Security Device (PSD) 22 is subjected to the same security 
requirements as are api^cable in the first onbodiment. Crediting new funds to the PSD 22 is 
managed by interface (modem) 21 adapted to the PC 26 which communicates 
cryptographically with a host Data Carter 20 w*ich provide fimds for the PSD 22 through the 
PC 26. The communications between the Data Center 20 and PSD 22 are cryptographically 
encoded with all transactions bdng verified by the crypto-code structure and certificate 
authorization schema as required by the regulating body. The communications b^wem the 
PSD 22 and data crater 20 may desirably be carried out as set forth in U.S. Pat. No. 
5,237,506, assigned to the same assignee as the assignee of the present invention. 

In the third embodiment of an Open Systmi arrangement, the PSD 22 is internally mounted 
(Figure 6A) or externally interfaced (Figure 6B) to a n^orked host 27. Networked to the 
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host 27 are one or more Personal Computers (PC) 26. The printing device 23 is int^ced to 
the host 27, as might be the case in a centralized mailing application. The printer 23 is enable 
of reproducing the franked image contrat, makup and resolution in accordance with 
regulatory requiremoits. 

5 This embodiment of the Postal Security Device (PSD) 22 is subjected to the same security 
requirements as in the other embodim»ts. Credittiig new funds to the PSD 22 is managed by 
inter&ce (modem) 21 ad^ited to the Networked host which communicates oyptographically 
with a ho^ Data Center 20 which provide funds for the PSD 22 through the Networked host 
27. The communications betwera the Data Center 20 and PSD 22 are oyptographically 
10 encoded with all transactions bdng verified by the orypto-code structure and certificate 

authorization scbmia as required by the regulating body. The communications between the 
PSD 22 and data canter 20 may desirably be carried out as set forth in U.S. Pat. No. 
5,237,506, assigned to the same asagnee as the assignee of the present invention. 

The Networked host 27 provides its interfaced print©- 23 with the indicia representing 
1 5 addressmg and postage value information requested by the local PCs 26 in accordance with 
indida context requirements of the regulatory body. The PSD 22 depicted in Fig. 6B may be 
moved to any other Open or Closed system application interfacing the PSD 22 in a like 
mann^. 

In the fourth anbodiment of an Open S^tem arrangement, the printing devices 23 are 
20 interfaced to local P^^nal Computers 26, rath^ than to a Networked host 27. Figs. 7 A and 
7B present the described configuration. Fig. 7A defines the N^orked host 27 with its PSD 
22 internally mounted while Figure 7B shows the PSD 22 ©cteraally interfaced to the 
Networiced host 27. HowevCT, the PSD 22 depicted in Fig. 7B may be moved to any other 
Open or Closed system application interfacing the PSD 22 in a like mann^. 

25 In a fifth embodiment of an Open System arrangment, the printmg devices 23 are interfaced to 
either local Personal Compute 26 or a mast^/host workstation 27 as shown m Fig. 8. A 
single PSD 22 can support one or more indicium application sources from a master 
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workstation 27. This embodimoit is typical of a decmtialized office environment where 
indicium applications occur at different workstations 26. However, only one workstation 27 in 
the local network loop 33 need have the PSD 22. AD work stations 26 have the ability to 
produce secure indicia. 

This embodiment of the Postal Security Device (PSD) 22 is subjected to the same sa:urily 
requirraients as in the previously described onbodimMts. Crediting new fimds to the PSD 22 
is managed by interfece (modem) 21 ad^ned to the woricstation 27 to wWdi the PSD 22 is 
attached vAdch communicates ayptographicaDy with a ronote host Data Coiter 20 v/bidh^ in 
turn, provides fimds for the PSD throu^ the workstation 27 to which the PSD 22 is attached. 
The workstation 27 to vrfiich the PSD 22 is attached provides its intafaced printer 23 and/or 
one or more of its int^&ced workstations 26 with the indida representing addressing and 
postage value information requested by the associated workstation 23 in accordance with 
indicia context requiremmts of the regulatory body. The PSD 22 depicted in Fig, 8 may be 
moved to any oth^ Open or Closed system application interfacing the PSD 22 in a like 
manner. 

Fmally, hybrid systems may be eQq)loyed in which a Closed System (CS) franking device is 
interfaced to an Open System (OS) Personal Computer-based system which may take the form 
of two different embodimorts, depmdm upon the needs of the customer, as disclosed in 
Figs. 9A and 9B. Such a sy^m provides the ability for a CS, typified in Fig. 2 v^se PSD 
may be internal to the franking device as disclosed m Fig. 2, or external to the franking device^ 
as disclosed in Fig. 1 . The Fig. 9A embodimait depicts said franking device interfaced to an 
extmial Personal Computer (PC) 26 which requests and receives proof of postage data from 
the CS franking device 24 for appUcation to a mailpiece bang processed through its (the PCs) 
own dedicated printer 23. 

Alternately as shown in Fig. 9B, said PC 24 may be networked to one or more Personal 
Computers 26 with each of those PCs 26 accessing one or more printers 23. Said printing 
means relate to any comma'cially available printing means capable of reproducing the franked 
image contait, makaip and resolution in accordance with regulatory requirements addressnig 
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said franked bnage cx>ntent, makeup and resolution. In each embodiments,-the cryptographic 
content of the printed indida image contains mformation unique to that transaction and 
specific PSD. 

In summary, the following have been disclosed: 

S •The PSD 22 via the ''dongle'' or oth^ adaptive interfacing device which coimects to and uses 
a conmiunications port ^^e still allowing the port to be used by other devices interface may 
be connected to a device not previously predisposed to accepting installation of said PSD 22. 

•The PSD 22 can be credited with new or additional funds via a modem 21 within or extenud 
to the PSDs host. 

10 'The PSD 22 can be credited with new or additional funds via a communications port (e.g. 

RS232) on the PSDs host. The host, in turn, utilizes its intCTial or external modem to contact 
a remote central Data Center for downloading of funds to be credited to the PSD 22. 

•The PSD 22 may be removed fi:'om its host and connected to the parallel or sarial port of a 
PC 26 with modem communications ability wherdn said PC would communicate with a 
1 5 ronote central Data Cent^ to download funds into the PSD. The PSD would then be returned 
to its operational host. 

•The PSD may be coimected directly to a PC wherein: 

- A postage metering device obtains a postmark (indicium) data from said PC, 
opiating in a Closed Syst«n (CS) environn^t. 

20 - A PC software can obtain a postmark (mdicium) data from the same PSD in either 

an OS or CS. 

- A PC can be networked and share a single PSD with associated PCs/workstations in 
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an OS. 

•While a PSD is connected to a postage metering device it is able to: 

- Output postnruulcs (indicium) data to a PC connected to the postage metering 
device's communication port (e.g. RS232) when operating in an Open System (OS) 
franking mvironment. 

- The postage met^g device configured as a Personal Computer (PC) is capable of 
being networked to one or more PCs to support multiple OS franking woricstations. 

While the invention has been des^ibed with respect to particular embodiments and figures, it 
should be understood that the invention is not limited to those particular embodimmts and 
figures. Indeed, those skilled in the art will readily identify numerous obvious variations of the 
invffltion, all of which are within the invradon, as defined by the claims that foQow. 
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Claims 

1. A system for printing j[K>staI indicia, the system 

a postage meter containing, within a seaire housing, a printing mechanism and a po^ 
security device, said postal security device containing an accounting register indicative of 
S postage value, and containing cryptographic means, said oyptographic means disposed for 
secure communications with a remote host for adjustment of the contents of said accounting 
register, ^d cryptographic means fiirth^ disposed for generation of data to be included in 
said postal indicia, said postal security device disposed to account within said accounting 
regist^ for postage value provided in said postal indicia and to &il to gradate such data vdicn 
10 said accounting register satisfies a predetermined condition; 

said postage meter communicativdy coupled with a pluraUty of personal computers, each 
personal computer connected with a corresponding printer, 

each of said p^wnal computers programmed to receive requests fi^m respective users for the 
printing of postal tndida, and to receive generated data from the postal security device 
IS responsive to the requests, and to print postal indicia within which the generated data is 
provided. 

2. The system of claim 1 wherein the postage meter and personal conqniters are 
corrmmnicatively coupled via a local-area network. 

3. The system of claim 2 wfao^ the postage meta* and personal compute are 
20 communicativdy coupled via ethemet. 

4. A system for printing postal indicia, the systrai comprising: 

a postage meto* containing, within a seoire housing, a printing mechanism and a first 
cryptographic means; 



13 



wo 98/13790 



PCT/US97/170d5 



said postage meter communicativety coupled with a postal security device, said postal security 
device containing an accounting register indicative of postage value, and containing second 
oyptographic means, said second cryptographic means disposed for secure communications 
with a remote host for adjustment of the contents of said accounting register, said second 
cryptographic means fiirth^ disposed for goieradon of data to be communicated in 
cryptographically secure communication with the first cryptographic means for inclusion in 
said postal indida, said postal security device di^>osed to account within said accounting 
roister for postage value provided in said postal indicia and to fiiil to graerate sudi data vAien 
said accounting register satisfies a predetermined condition; 

said postage meter co m municatively coupled with a plurality of personal compute, each 
personal computer connected with a corresponding prints, 

each of said personal computers programmed to receive requests fi-om respective users for the 
printing of postal indicia, and to receive gmerated data from the postal security device 
responsive to the requests, and to print postal indicia within which the generated data is 
provided. 

5. The systmi of daim 4 wherein the postage meter and personal computers are 
communicatively coupled via a local-area network. 

6. The system of daim 5 wherein the postage meter and personal computers are 
conununicatively coupled via ethonet. 

7. A system for printing postal indicia, the system comprisii^: 

a postage meter containing, within a secure housing, a printing mechanism and a po^ 
security device, said postal security device containing an accounting regist^ indicative of 
postage value, and containing cryptographic means, said cryptographic means disposed for 
secure communications with a r^ote host for adjustmmt of the contents of said accounting 
register, said cryptographic means fiirther disposed for generation of data to be included in 
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said postal indida, said postal seoirity device disposed to account within said accounting 
register for postage value provided in ^sd postal indida and to &fl to generate such data when 
said accounting register satisfies a predet^mined condition; 

said postage meto* communicatively coupled with a p^^nal compute, said p^^nal 
S computer connected with a corresponding printer, 

said personal computer programmed to recdve requests fix)m a respective usct for the printing 
of postal mdida, and to recdve gen^ted data fixnn the postal security device responsive to 
the requests, and to print postal indida within whidi the generated data is provided. 

8. The system of daim 7 herein the postage meter and personal computer are 
1 0 communicativeiy coupled via a local-area network. 

9. The syst^ of daim 8 wherdn the postage meter and personal computers are 
communicatively coupled via ethemet. 

10. A system for printing postal indicia, the system comprising: 

apostage meter containing, within a secure housing, a printing mechanism and a first 
1 5 cryptographic means; 

said postage meter communicatively coupled with a postal security device, said postal security 
device containing an accoimting register indicative of postage value, and containing second 
cryptographic means, said second cryptographic means disposed for secure communications 
with a remote host for adjustment of the contents of said accounting register, said second 
20 cryptographic means fiuther disposed for generation of data to be communicated in 

cryptographically secure communication with the first cryptographic means for inchision in 
said postal indida, said postal security device disposed to account within said accounting 
register for postage value provided in said postal indida and to &il to g&terat^ such data whoi 
said accounting register satisfies a pred^ermined condition; 
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said postage m^er comimmicativdy coupled with a pCTsonal computer, said personal 
computer comiected with a ccHre^nding prints, 

said personal compute programmed to recdve requests from a respective user for the printing 
of postal indicia, and to recdve generated data from the postal security device re^nsive to 
the requests, and to print postal indida within wWdi the generated data is provided. 

1 1 The system of daim 10 wh^n the postage meter and personal computer are 
communicativdy coupled via a local-area network. 

12. The system of claim 1 1 wherdn the postage meta* and personal computer are 
communicativdy coupled via ethmiet. 

13. A system for printing postal indida, the system comprising: 

a first personal computer, said first personal computer connected with a respective printer, 

said first personal computer communicatively coupled with a postal security device, said postal 
seouity device containing an accounting register indicative of postage vahie, and containing a 
cryptogr^hic means, said cryptographic means disposed for secure communications with a 
rCTiote host for adjustment of the contents of said accounting register, said cryptographic 
means fiirther diq>osed for genmtion of data to be included in said postal indida, said postal 
security device disposed to account within said accounting raster for postage value provided 
in said postal indida and to fail to generate such data when said accounting regista- satisfies a 
predetermined condition; 

said first po^nal computer communicativdy coupled with a phirality of second personal 
computers, said second personal computers each connected with a corre^nding printer, 

each of said second personal conqniters programmed to receive requests fit)m a respective 
user for the priming of postal indicia, and to recdve generated data from the postal security 
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device responsive to the requests, and to print postal indicia within which the generated data is 
provided. 

14. The system of claim 13 wherein the first pownal computer and second personal 
conq}uter5 are communicativdy coupled via a loca]-area network. 

5 15, The systOTi of claim 14 wherein the first personal computer and second p^^nal 
computers are communicativdy coupled via etbemet. 

16. A system for printing postal indicia, the system comprising: 
a first pa*sonal computer; 

said first po^nal computer conmiunicatively coupled with a postal security device^ said postal 
10 security device containing an accounting register indicative of postage value, and containing a 
cryptographic means, said cryptographic means disposed for secure communications with a 
remote host for adjustment of the contents of said accounting registw^, said CTyptographic 
means fiirther disposed for gen^ation of data to be induded in said postal indida, said postal 
security device disposed to account within said accounting register for postage value provided 
I S in said postal indicia and to fail to generate sudi data when said accounting register satisfies a 
pred^ermined condition; 

said first personal conq)uter communicattvely coupled with a plurality of second personal 
computers, said second personal compute each connected with a corresponding printer, 

each of said second personal computers programmed to recdve requests fit)m a respective 
20 user for the printing of postal indida, and to recdve gen^ted data fi-om the postal security 

device re^onsive to the requests, and to print postal indicia within which the generated data is 
provided. 

17. The system of claim 16 wherein the first personal computo^ and second personal 
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computes are communicativdy coupled via a local-area network: 

18. The system of claim 17 wherein the first personal computer and second personal 
computers are communicatively coupled via Fernet. 

19. A system for printing postal mdicia, the system comprising: 

5 a first personal compute*, said first personal compute cormected with a first prints; 

said first po^nal conqniter communicativdy coupled with a postal seonity device, said postal 
security device contatning an accounting re^^ indicative of postage vahie, and containing a 
cryptographic means, said cryptographic means disposed for secure communications with a 
remote host for adjustmoit of the contmts of said accounting registo*, said cryptogr^>hic 
10 means fiirther disposed for gen^ation of data to be inchided in said postal indida, said postal 
security device disposed to account within said accounting r^isto- for postage value provided 
in said postal indicia and to fail to generate such data when said accounting register satisfies a 
predetermined condition; 

said first p^sonal computer communicatively coupled with a plurality of second personal 
15 computers; 

each of said second personal computers programmed to recdve requests fiom a respective 
user for the printing of postal indida and to conmmnicate said requests to said first personal 
compute, said fn^t personal computer programmed to respond to such requests by receiving 
generated data fi-om the postal security device responsive to the requests, and to print on said 
20 first printer postal indida within which the generated data is provided. 

20. The system of claim 19 whmin the first p^sonal computer and second personal 
computers are communicatively coupled via a local*area network. 

21 . The system of claim 20 wherein the first personal computer and second persoi^ 
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computers are communicativdy coupled via ethernet. 
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